Fix sql security