Added SQL injection protection