#64388 by Gábor Hojtsy. Add missing db_rewrite_sql(); not a security issue since it is a count() query.