added string escaping for mmysql input