Add parameters to protect database from injection.