Checked visualize for intance of SQL injection and found none.
Refactored q() to take a new optional $params array parameter.
Refactored controllers for SQL injection.
Checked remaining q() and findbyPk() function calls for SQL injection and corrected as necessary.
Checked and fixed SQL injection in findByAttributes() calls.
Merge branch 'sqlinject' into dev

Conflicts:
	egowebWebApp/plugins/visualize.php
	egowebWebApp/protected/controllers/DataController.php
	egowebWebApp/protected/models/Expression.php
	egowebWebApp/protected/models/Interview.php
	egowebWebApp/protected/models/Study.php
	egowebWebApp/protected/views/data/visualize.php