Fixed possible SQL Injection.