Fix SQLi in admin page

I blame Garrett