Move more queries to params
Merge pull request #5 from unikent/fix/sql-injection-2

Fix/sql injection 2
Merge pull request #6 from unikent/master

SQL