Fix security (SQL injection)