$wpdb->escape calls converted to esc_sql