Escape email addresses in UPDATE query