real escape string validation added