escape user inputs before save