Convert array_fill() calls to db_placeholders() in webform_get_submissions()

Right now we're doing some unnecessary work generating our own placeholders for SQL queries when we could be using Drupal core's db_placeholders() function. These patches convert array_fill() to use db_placeholders() in D6 and a better sanity check on anonymous user submission IDs.