Update due to SQL injection exploit