Use mysql functions to escape the parameters