Sql Injection Python