Fixing potential sql injection attack!