Un-fix for SQL-Injection

Wrong variable type make SQL Injection much easier