SQL injection check

https://discourse.hkvstore.com/t/executescalar-sql-best-practice/8272/2