Update to SQL injection checks