Fix SQL Injection Vulnerability

SQL query is not properly escaped, allowing SQL injection attack via malicious request.
Merge pull request #134 from KyraD/patch-1

Fix SQL Injection Vulnerability