Be more strict about what is passed to SQL.
Improve README.