SQL-injection

Fix sql-injection assets/snippets/evogallery/classes/gallery.class.inc.php#L278