Remove sql injection problem