protect vocab insert from sql injection