Databse INSERT/UPDATE secured against db javscript injection