SQL injection fix.
Google sanitizing sql input. almost every single article explains why you should never attempt to roll your own function to do this.
Merge pull request #4375 from MrStonedOne/fastestmergeever

SQL injection fix.