Added parameters to findWhere to aid in the ongoing battle with SQL Injection