Add protection against SQL injection