INSERT and UPDATE statements use parameters for the values

I tried to fix issue #4 by myself ;)

**Disclaimer**: I'm no JavaScript expert. Use at your own risk ;)