Changed db_escape to seal the system against XSS atacks