Scrub input for SQL in protected (admin) pages.

Closes #18.