More careful input handline (vs. SQL injection)