Fix 'Possible SQL injection vector through string-based query construction.' issue in server\main.py

[devfinwiz]

CodeFactor found an issue: Possible SQL injection vector through string-based query construction.

It's currently on:
server\main.py:73
Commit 9cabd6f

[devfinwiz]

Example of insecure code:

import MySQLdb

query = "select username from users where username = '%s'" % name
con = MySQLdb.connect('localhost', 'testuser', 'test623', 'testdb');

with con:
    cur = con.cursor()
    cur.execute(query)

Example of secure code:

import MySQLdb

query = "select username from users where username = '%s'" % name
con = MySQLdb.connect('localhost', 'testuser', 'test623', 'testdb');

with con:
    cur = con.cursor()
    cur.execute(MySQLdb.escape_string(query))

[devfinwiz]

@yash-dk Can you please wind up this issue in the near future?