[SECURITY][BUGFIX] Fix a sql injection in beuser