sqlesc() security update