SQL injection prevention for API stuff implemented