Made item price editor use prepared queries

to prevent SQL injection.