Researching better way to do escaping for SQL