Things Randy will do

• Try to remove sql inject
• Check for delete, and other special words
• Alex is thinking about how to create case statements
• Variable names associate with clause or function

From Alex

How do we keep the query in correct syntax