Escaping SQL input, things are a little safer now