address an injection vulnerability via LIMIT. also typecast values to integers.