INSERT statements don't work with postgres

The INSERT statements don't work with postgres. This changes three occurrences to use INSERT (...) VALUES (...) syntax, which should work in both mysql (untested) and postgres as is done in the rest of the drupal code. It also ensures the values in these statements are properly cleansed.