Fixed: Correctly escape MySQL input arguments.