fixes bug 933922 - tcbs SQL is at risk of SQL injection, r=selenamarie