fixed MySQL password escaping