protect mysql injection
fix minor spaces
rename screenshot image