[UNTESTED] patched SQL injection in rules.php

thought I'd help a brotha out ;)