Fix to the sql injection and the wsgi path