block sql injection holes
add json output support