automatic quoting of values - a measure to avoid sql injection