how to escape single quotes in sql