Sql date 1 year, This is the best way of protecting against SQL injection