better "falsy" values management

* falsy-but-not-Numbers-and-not-null values are converted to blank Strings
* added a "SQL injection prevention" unit test
* version bumped to 0.7.1