Is the event submission secure from sql injection?