More fixes for surfbar, SQL_QUERY_ESC() now escapes zeros