Utils to escape sql string
Do not limit whereIn only to numbers