Fixed SQL injection vulnerability