LP#1822630: fix sanitizing CGI params on place_hold_result