Fixed some unsanitized inputs.

Unsanitized inputs being fed directly into queries.