fixed potential sql injection issue