try escaping before going to db