Dummy fix to prevent SQLi vulnerability

This commit <a href="https://github.com/OpenBazaar/OpenBazaar/commit/8cf80476ea3ef43be708f4acf33541f2f1a7c21c#diff-f786d117424135ddefa8b390ac81b8b3">here</a> makes SQL injection possible through the SELECT statements.

We should revert back and make the selectEntries method accept a dictionary instead of the raw SQL clause. We should then change the callers accordingly. 

Since this will take a while, i made a silly temporary fix that prepares the values in an upper lever.