Fix potential SQL injection.