SECURITY FIX
We now force limits to be integers.
This was a bad bug that would've allowed SQL injection since we can't put placeholders in for limits.