Critical SQL issues and Drupal Coding standards

Hey Ki,

I ran the coder module and came across the following critical SQL issues:

report_content.module:
Line 87, Line 90, and Line 137: the %s placeholder needs to be wrapped in single quotes to avoid SQL injection.

report_user.module:
Line 104 and Line 116: need curly brackets around the table names.
Line 420: use placeholders instead of variables in a query.

I also found some normal status SQL issues:

report.module
Line 101: Use db_query_range() instead of the SQL LIMIT clause

report_content.module
Line 87, Line 90, Line 137: Use db_query_range() instead of the SQL LIMIT clause

There were also a series of other Drupal coding issues that I came across. I've attached a patch with fixes for all of these issues.

-German