more secure way of using execute for mysql