_really_ fixing the sqli vuln