prevented sql injection
Merge pull request #2 from finnjohnsen/master

prevented sql injection