Thanks :)
And yeah I usually escape most things, I try not to trust the user although just learning/getting used to the sqlite class today and im not sure if that escape string has any bugs etc but I suppose it should be sufficient.

Added it in the title!