Prevention from SQL injection added