added executeSQL (missing system for safe variables in the SQL statement)