Add "" in variables to prevent remote code execution