Revert to 2974e596bc3e40ef568f9375cc52c93e6e957a1f
SQL injection fix by parameterizing SQL queries