fix bugs of String para concatenating to SQL statment; triggers added, but needs test
tag post trigger tested and passed; user trigger untested