BUGFIX: added an escape method before insert in DB