produce incorrect behavior because the wrong name would be recorded.
When feasible, it may be safest to disallow meta-characters entirely, instead of escaping
them. This will provide some defense in depth. After the data is entered into the
database, later processes may neglect to escape meta-characters before use, and you may