Add safeSql() to filter dangerous character