hotfix for sql inject
Merge pull request #5 from bellcom/h/SA-CORE-2014-005

hotfix for sql inject