partially implemented insert, added sql selection builder immune to sql injection attacks