Added some missing mysql escaping