Typo and missing link for SQL injections