Escaping reserved characters in a query