fixes bug 933922 - tcbs SQL is at risk of SQL injection

@selenamarie r?