added marks for SQL injection danger
DANGER:
changed all potential points for SQL injections