SQL Injection

Changed all of the SQL Queries to be safe from SQL Injeection