stopped lisp symbols as values from being able to inject sql (SECURITY BUG)