Fix a SQL injection vulnerability in project.datei.php

CVE-2014-3246 (Debian bug #748828) mentions a SQL injection
vulnerability due a not properly sanitized input variable.