Fix security breach (SQL injection)