added warnings for future devs to not run into sql injection mistakes