ok ACTUALLY protecting against sql injection this time :)