SQL Injection fix - Final

Fixed a small syntax issue…