->escape is deprecated, using esc_sql instead