possibility of sql injection
alternate variant, to remove not nummeric chars
Merge pull request #1 from MePha/patch-1

possibility of sql injection