Android : SQLite query injection