Added protection from MySQL injection and cross-site scripting