properly escape stuff... :(