Safely inject the values into SQL