[Fix] avoid sql injection
Merge pull request #84 from PlumLabs/ed/fix_injection_sql

[Fix] avoid sql injection