hopefully prevented some ugly sql injections