Attempted to sanitize sql inputs

I did this by using preparedStatement in the add-graph-data method.