Change syntax of mysql queries to avoid sqli.