Added SQL Protection to SELECT statements