Fixed Python SQL vulnerabilities #13

Changed all SQL commands to use Parametrized SQL, which creates an
execution plan based on the initial statement, and execute only that. It
ignores any extra commands injected through parameters. Furthermore
modified small routing things including capitalization of some routes.