Changes to module to avoid sql injection.

Signed-off-by: DavidJClark <david@noticeabledesigns.com>