how about escaping random strings before inserting them into your database, shithead