Added SQL injection prevention.