Fixed potential sql vulnerability