anchor.diff:  proc/feedback_dec(var/variable,var/value)
   	if(!blackbox) return
   
  +	variable = sql_sanitize_text(variable)
  +
   	var/datum/feedback_variable/FV = blackbox.find_feedback_datum(variable)
   
   	if(!FV) return
  
positive.code: proc/feedback_inc(var/variable,var/value)
  	if(!blackbox) return
  
  	var/datum/feedback_variable/FV = blackbox.find_feedback_datum(variable)
  
  	if(!FV) return
  
negative.code: 
  		dbcon.Disconnect()
  
  // Sanitize inputs to avoid SQL injection attacks
  proc/sql_sanitize_text(var/text)
  	text = dd_replacetext(text, "'", "''")
  	text = dd_replacetext(text, ";", "")
  	text = dd_replacetext(text, "&", "")
  	return text
  
  proc/feedback_set(var/variable,var/value)
  	if(!blackbox) return
  
  	variable = sql_sanitize_text(variable)
  
  	var/datum/feedback_variable/FV = blackbox.find_feedback_datum(variable)
  
  	if(!FV) return
  