sql injection to the queries added