CI 2.2-stable updates (Security, MySQLi, SQLSrv)

- CI 3404 - Improve mysqli's escape_str()
- CI 3309 - Security XSS Clean breaks URLs with get variables
- CI 3314 - SQLSRV has injection problem in count_all function