escape mysql column on select criteria