Used escape_string in UserModel