mysql inject funtion needs to be completed.