Better escaping of SQL name in urls