add simple error handling when iterating over given coordinates
also describe that SQL injection is probably impossible to get by arithmetic division