added consequent mysql escaping