Major XSS and SQL Injection Security Fixes