Do I need to escape DB input? Do I need to escape DB input? database database