SQL Injection fix

As requested in #122