Changed sql engine to use parameterised queries to avoid sql injection attacks