Filter by shop for EE only.
Escape strings outside building the sql string.