Fixed potential SQL injection vector