prevent sql injection continue