SQL injection fix. This is serious I think.