Fix extrafield SQL request

Nothing prevents attributekey to be an integer. In this case, it needs escaping(!)