escape $uID parameter in PageList::filterByUserID()

Avoid SQL Injection in case a developer passes a user-provided ID directly to this function.