applied patch for SQL injection issues
fixed comment indenting