Improved query escaping.

Added ignoring strings starting with a % so you can use: DATE_FORMAT(date, "%Y-%m-%d").