Use an ORM

[Jakob Löw]

Writing SQL statements manually is old fashioned and insecure.

[Crsi]

Please point out how it's insecure the way it's currently implemented.

[Crsi]

This will be addressed in the new implementation of the REST API using sqlalchemy.