escape all $id used in sql queries
Merge pull request #1579 from j33f/develop

escape all $id used in sql queries