How to Prevent SQL Injection: Example of a Valid Statement