handle add escape so the "'" character doesn't break mySQL