SQL injection prevention done.
merged