escaped inputs in userprofile for db