escape % symbol for sql extra