bugfix: we did not escape \z, \t, and \b properly in ngx.quote_sql_str().