Update ss_createshard.txt

To prevent anything unusual. It's better to escape everything that user can input by himself before adding that to SQL query.