Presentation & fix SQL injection