Escape SQL special characters and quotes in strings
github.com/packagestats/sql-escape
packagestats/sql-escape