Escaping chars before inserting on Database