This kind of change is not good... It's better for security to use parameterized queries instead of concatenating input values.