Fixing mysql escape string?