SQLi fix