Added DB injection.
Removed username/password from cf file.
Fixed syntax error with unnecessary comma.