Update ss_createshard.txt

To prevent anything unusual. It's better to escape everything that user can input by himself before adding that to SQL query.
Merge pull request #1 from HeroGarr/patch-1

Update ss_createshard.txt