Web API: Fixed a bug where if any text fields contained a " ' "
character, the SQL query would fail. To prevent this, str_replace()
replaces any and all " ' " characters with " \' ".