Eliminate potential SQL injection from database queries

[Alex-Vol-SV]

The TODO markers indicating the possibility of SQL injection issues were used to guide this implementation. Fixed by applying parameterized queries.

Found a unitest issue that was masked by the use of concatenation in SQL and fixed the unit tests to match the runtime code execution.

[coveralls]

Pull Request Test Coverage Report for Build 128

• 4 of 4 (100.0%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.3%) to 72.318%

---

Totals
Change from base Build 89:	0.3%
Covered Lines:	258
Relevant Lines:	333

---

💛 - Coveralls