Fix SQL injection and XSS

Just 2 more bugs,

If you need any help let me know.