Fix more SQL injections