Fix the SQL injection! STRING INTERPOLATION - NEVER AGAIN. NEVER!