SQL escaping is now based on environment / moved img dir to ycs root