fine tune sql execution, statement param to avoid escape character