#1676 | Avoid sql injection in numeric observations call