012 Bug Fixed – Sql injection