escape all execute statements
Merge pull request #48 from markolson/fine-kill-sql-injection

escape all execute statements