Fixed wrong sql injection detection on empty array values