Fix sql_escape for multiline inputs