Adding SQL injection vuln to index route