diff --git a/ubercart/uc_order/views/uc_order_handler_field_order_cost.inc b/ubercart/uc_order/views/uc_order_handler_field_order_cost.inc
--- a/ubercart/uc_order/views/uc_order_handler_field_order_cost.inc	Thu Apr 21 14:34:16 2011
+++ b/ubercart/uc_order/views/uc_order_handler_field_order_cost.inc	Tue May 24 23:15:49 2011
@@ -32,7 +32,7 @@
    */
   function render($values) {
     $this->field_alias = 'order_cost';
-    $cost = db_result(db_query("SELECT SUM(cost) FROM {uc_order_products} WHERE order_id = %d", $values->{$this->aliases['order_id']}));
+    $cost = db_query("SELECT SUM(cost) FROM {uc_order_products} WHERE order_id = :oid", array(':oid'=>$values->{$this->aliases['order_id']}))->fetchField();
     $values->{$this->field_alias} = $cost;
     return parent::render($values);
   }
diff --git a/ubercart/payment/uc_google_checkout/uc_google_checkout.pages.inc b/ubercart/payment/uc_google_checkout/uc_google_checkout.pages.inc
--- a/ubercart/payment/uc_google_checkout/uc_google_checkout.pages.inc	Tue May 24 23:21:23 2011
+++ b/ubercart/payment/uc_google_checkout/uc_google_checkout.pages.inc	Tue May 24 23:21:16 2011
@@ -97,7 +97,7 @@
   $country = uc_get_country_data(array('country_iso_code_2' => $address->{'country-code'}));
   $order->delivery_country = $country[0]['country_id'];
   $order->delivery_city = $address->city;
-  $zone_id = db_result(db_query("SELECT zone_id FROM {uc_zones} WHERE zone_code = '%s' AND zone_country_id = %d", $address->region, $order->delivery_country));
+  $zone_id = db_query("SELECT zone_id FROM {uc_zones} WHERE zone_code = :code AND zone_country_id = :cid", array(':code'=>$address->region, ':cid'=>$order->delivery_country))->fetchField();
   $order->delivery_zone = $zone_id;
   $order->delivery_postal_code = $address->{'postal-code'};