sql injection fixups