Bug 19061: Avoid SQL Injection vulnerability