FIX Prevent SQLi when no URL filters are applied

Merge into master too