Added custom filtering option.

I'm worry about SQL injection, but node-mysql provides multipleStatement
= false option to block such operations.