escape string formatting the old-fashioned way