fix inject sql and hump mvc