fix sql injection

Hi,
This commit fixes possible sql injections through driveby-sharing form. It has the inconvenient to cause errors on every title or comment containing the ' character.
Disclaimer : I'm no security expert, so this fix can be wrong.