use escapeshellarg to escape database password