fixing bugs with api/server and removing ways to do sql injection attacks