escaped data going into database