Don't hardcode table, user, column or data given to SQL