$wpdb->prepare() & get_user_by() added