Fixed SQL injections