When escaping no need to enclose the string in quotes (MySQL)