Plugged a possible SQL injection vulnerability