highlighted sql injection attacks and
fixing up the sql injection vectors