[-] Security: escape

escape for variables