Started to change the query to the prepare statmend to prevent SQL-injections