lua: (xp save) prevent sql injections with modified cl_guid, refs #234