[bp/r46462][SEC] Always use parameters in queries to prevent XSS

git-svn-id: file:///var/local/code.tiki.org/tikisvn/branches/10.x@46473 b456876b-0849-0410-b77d-98878d47e9d5