escape special characters in sql responses