sqli prevention
maxrows in report run