Fixed the security bug

I've the fixed the security bug which had enabled possible SQL injection.