[projects_list_data] SQL INJECTION via text search