made tasting number required, escaped apostrophes in sql inputs