Use $wpdb->prepare() for SQL statements in wp-postratings.php
Merge pull request #6 from paulgibbs/more_sql_improvements

Use $wpdb->prepare() for SQL statements in wp-postratings.php. Props paulgibbs.