Protecting database by stripping tags in update