bugid:96409 fixing sql injection risk
Merge pull request #402 from Wikia/bugid-96409-lightbox-sql

bugid:96409 fixing sql injection risk. code review by @garthwebb