solving sql injection issues, added queue for ajax calls