fixed $database escaping in install script