Escape every string which is passed to the DB

Fix #4

Add a Db::escape() function in order to escape strings that get passed to the
Db. Most of the use of this function is done in the Model class.