Added escapes on parameters and values, SimpleSQLQueryHelper