Adding mysql injection protection