filter_api: ensure that the free_text where clauses are always ANDed

Fixes #15573: One query can be issued via current Mantis interface to
take down site