Avoid possible SQL injection when passing in multiple values.
Resolves issue #4.