Injection hacks fixed

all checks are moved to checkName() function and a check for brackets ("<") has been added