[Bug] SQL Injection Vulnerability #90