Added sanitizing off sql