Comment 8 for bug 889825

Thanks Max! The patch looks good except for the manual escaping of the track locations in the SQL query.

Please use the FieldEscaper class instead from src/library/queryutil.h and then just join the QStringList by ,