fixed injection when insert user
snaoue