added security against sql injections