escape db values
Merge pull request #8 from simonrobson/escape-sql

escape db values