security fixed
validation fixed
change in sql