Merge pull request #447 from cutedemons/master

improve sql wall
Merge pull request #450 from cutedemons/master

add testcase
Merge remote-tracking branch 'upstream/master'
fix blacklist bug & parameterize NULL to ?