SQL Injection Fix

Signed-off-by: DavidJClark <david@noticeabledesigns.com>