Escape variable names

Plugin doesn't currently work because the variable names are not escaped.