Added user input escaping; changing LIKE to = for location