Escaped user input

User input should be escaped to prevent user SQL injection attacks.