[i/178] removing harmy call of $db->sql_escape()