Security entry villages loophole - SQL injection