Question: A good way to escape quotes in a database query string?