Fixed: Possible SQL injection