Hot fix: SQL statement character escape