Add alternative escape syntax: db.exec(sql, [param, ...])

In this pull request:
 - Removed uid param from db.exec()
 - Added params parameter to db.exec(), which will be passed to mysql's escape functionality.
 - Deprecated db.execute()