fix sql injection

Hi,
This commit fixes possible sql injections through driveby-sharing form. Without it, there are errors with every title or comment containing the ' character.
Disclaimer : I'm no security expert, so this fix can be wrong.

EDIT: my comment was misleading.