Prevent SQL injection, thanks @Eckankar