fix a short sqli
keyword merging code should use API to do lookups