add escape ' and "