Ditto - Fix possibility of sql injection