Fix a stack of non-parameterized queries. SQL injection risk before!