Added sanitisation of MySQL query