remove uses of dbEscape