Fixed SQL Injection Hole