PDO: Escaping Input with quote()