StringHelper safeSqlString