Fixes one SQLi and some XSS issues. Also fixed one spelling mistake