properly escape variable