Fixed SQL injection potential.