Fixed multiple SQL injection vulnerabilites by properly escaping all integer-based DB query parameters.