Added html_entity_decode in db_escape() for correct INSERT>SELECT>INSERT