Unescapes str for use within an SQL command.
str
This is the exact opposite of escape_string.
a server provider.
a Connection object, or null
a string to escape
a new string