Re-added getDB()->escape(...) to some sql strings.
Merge pull request #12 from secit/master

Made the SQL calls escape safe.