Escape params

Escape the params, to prevent html leaking.
don't forget the return
Merge pull request #45 from barryvdh/pdo-escaping2

Escape PDO Params