Fixed issue #07918: Potential SQL injection with array params
Dev: filter is_string in returnGlobal