SQL inj fix
Merge branch 'dev' of github.com:bgerp/bgerp into dev