unsafe query in request2