Prevent sql injection in user ranking