Project PR

not safe po. :sweat:
please change to prepared statement :bow: