fixed security issues with mysql