Fix SQL Injection Vulnerability