mencegah sql injection b2b