Added Character Escapes

This will prevent a malicious attack called 'SQL injection'.