Injection protection on the last field of queries
Injection protection for updates