Securing web application against harmful SQL injections