fix sql injection vulnerability