Update sql.php

Let's escape value's so fields like 'de-DE' are saved correctly.