Protection from potential SQL injection attacks.

User input should be escaped to prevent user SQL injection attacks.