escape single quote or double quote value(s)