added msqli string check