prevent unsafe SQL statement
Merge pull request #27 from MuhKuh7/mysql

Prevent unsafe SQL statement (Part of #836)