prevent from sql injection, update person response, update unit query
update security problem and service strategy