SQL_ESCAPE() may cause problems with header.tpl