Safer WHERE clause