Remove SQL injection vulnerability