SQL injection fix.
Google sanitizing sql input. almost every single article explains why you should never attempt to roll your own function to do this.
Fixes sql errors caused by odd and unexpected behavor in dbcon.Quote()