bug 1953 [1/2]: fixing SQL injection problem in C4::Context->preference