Fixed SQL injection security holes