[fix] mrp: potential sql injection vector