Prepare database filters for extra security

Just to be safe, make sure the filtered $where clause is run through
$wpdb->prepare()