Using PDO means we can skip an escape call