fixed the whole insert statement being cleaned instead of the individual parameters