v0.6.9 add sql inject & xss attack check