SQL Injection fix

This fixes #119