db->escape() can work with array