fixed mysql escaping strings