fixed security issue with mysql