added control on comparator (against SQL injection)