move security check before page processing
escape the vulnerable variable
Merge pull request #189 from nean/sql-injection-fix

Blind sql injection fix