Escapes string to make it understandable by a DBMS.
string
The escape method is very common and replaces any occurrence of "'" with "''" and "\" with "\\"
string to escape
a new string