fix sql injection vulnerability
Merge pull request #1 from arsham-f/master

fix sql injection vulnerability