db: note: not to use deprecated escapeInteger/escapeString