fix SQL injection
[Pman.Core] / Pman.Remarks.js