sqlstring now pulled from node-mysql, pq queries escaped