Added comment method, made sql more secure