Fixed SQL injection vulnerable