made serializable.
prevent sql injection.