applied patch for SQL injection issues