fix #2 for mysql escape string