prepopulate db
Working verison

Nobody will every SQL inject this