Unable to select user, that has ' in it's username

In-Portal uses formatter classes to transform database values into human readable form and back.

Class kLEFTFormatter in particular is used along with user selectors to convert username selected into ID and back. I've recently discovered, that it doesn't escape value from the form before checking it's presence in database resulting sql error, when username has ' in it.