Sanitize the 'version' field in a review request.

Johannes Dahse found this potential SQL injection with his PHP
analysis tool.