Python Escape String For Sql