escape_string for key and value in sql