fixed bug in statementsinput function --> non-escaped &amp;