fixed possible sql-injection
Merge branch 'master' of https://github.com/TheBnk/rojo