Avoid SQL Injection attacks
Use model callbacks to keep track of the vote tally