Updated the module-editrecord

- using the parameter function to avoid conflicts
- safe from database injection