Escape sql in contact.getquick api