protection against XSS and SQL Injection improved