SQL Injection fix #12 #2
remove comments and test in library