Little Bobby Tables strikes again.

I thought proper escaping was already happening. Turns out it wasn't.