Fixed SQL injection vunerabilty in login formula with prepared statements