escape single quotes before insert & select all command