Escaped user input for sql adhoc