It looks like that ftp account doesn't have write access, so I can't debug the files.
The DebugSQL() function just replaces the parameters in the string... it doesn't have the SQL injection security checks the actual parameterized query would run when replacing parameters.
You won't be able to pass in multiple values using "s". If you can update my FTP privileges I'll debug it and get it working for you.