Now accepts SQL and renders JSON. very insecure.