Hotfix sql injection on fulltext search