Fixing the very serious SQL injection in Drupal 7.31 (and earlier) - ref SA-CORE-2014-005