Fixed SQL injection vulnerabilities