[UNTESTED] patched SQL injection #3

in lib/setRules.php