Started using parametrized queries in places, and also switched to storing password hashes instead of passwords