Switched over to PDO->quotes for escaping strings