[#145464055] Parameterize queries to avoid SQL Injection issues.
[#145464055] Parameterize queries to avoid SQL Injection issues.

Also convert use of _POST parameters ot _REQUEST to permit the same request to occur over an HTTP GET.

concord-consortium/data-science-games,concord-consortium/data-science-games,concord-consortium/data-science-games