Fixed SQL injection issue.