Quote backslashes

(At least in MySQL) It is possible to do a SQL injection by passing "\'"
in a string. It gets quoted as "\''", but backslash escapes first quote
and second one ends a string in SQL.