use proper DBI parameter passing to improve security

remark out call to zmupdate.pl -f