Fixed SQL injection introduced by recent commits ! (title)