fix possible sql injection
Merge pull request #2 from weaksauce/SQLInject

fix possible sql injection