Adding a bit of security when runing queries with user input