Fix SQL Injection

https://github.com/DZCP-Community/dzcp/issues/50