Mysql dynamic query [sql injection]