Additional security fixes in sql statements.