V11 beta bug fixes

this work isn't done yet, but I wanted to open the PR to share what I am doing to resolve outstanding v11 beta issues.

this includes my attempt to mitigate the (highly unlikely but possible) SQL injection attack issues raised by the Veracode scan.