All values are now properly escaped before they're added to the insert query