Now database escaping 'filter' strings.

No more use of safeString for this.