fixed typo in check for sql sanitising function