protect credentials from sql injection :scream: