Escape SQL quote properly.