fix potential SQL injection attack
correct possibly incorrect args
Merge pull request #6 from sbluen/patch-1

fix potential SQL injection attack