SQL injection attack fix.