sql injection code snippets in typescript