Fixed all sql injections