Escape file names in SQL query.