If there is user submitted text in event description we need to deal with XSS somehow, I guess it would be better to use only integers and safe strings there for now until we decide how to deal with this in logging and reports...

Affected events:

• blog_entry_created
• blog_entry_deleted (collides with record in other field)
• blog_entry_updated (incorrect single quotes)
• course_module_created (modulename is ok)
• course_module_updated
• user_deleted
• course_module_viewed (not sure about the 'content')

Note: this is a minor issues because we can change descriptions at any time...