s = "foo"; db.escape(s) == "'foo'"; ?