fix for issue #9 -- not escaping variable names