MDL-24081 completion Fixing sql injections and use of sql_ilike()