Escape shell characters in query before running
Merge pull request #8 from dwb/shellescape-fix

Escape shell characters in query before running