Quote username and db name in sql queries for odd characters