Fixed sql injection behavior

Fixed sql injection behavior. Pdo prepare is sufficent enogh to protect
against sql injection. Addslashes would ad an additional not needed \ to
the query... addslashes removed
Fixed some authenticatino on getting poll by id.
Hotfix for nullchecker. 0 is allowed and treated as filled value