Attempting a universal SQL injection fix