Removed SQL injections from getCol