Use $wpdb->prepare() for SQL statements in wp-postratings.php

Again, these seem to work for me, but you should test before merging as you know your plugin better than I. :)