should fix #: ignoring 'raw' filter to prevent SQL injections