Fix/sql injection 2