Efficient Method for Preventing SQL Injection Attacks on Web Applications Using Encryption and Tokenization