Update evaluate_cookie

- SQL injection.