added SQL Injection defense