Fixed bug in query: if "%" is used in an SQL query, it needs to be escaped as...

Fixed bug in query: if "%" is used in an SQL query, it needs to be escaped as %% because otherwise it can get parsed by the sprintf() in db_query().
See: http://drupal.org/node/view/5531

(present in HEAD as well)