sql-injection fix in deleteDisclosure function