We weren't escaping slashes in queries properly.