Fix SQL injection vulnerable