prevent sql injection by using sqlite formatter on various code that generates sql stmts with switch_snprintf