How to dynamically insert in SQLite without SQLInjection