Added support for input and output parameters in batch method.

+ Added checks for SQL injection in parameter names