Proper escaping of query string