os.execute mysql escapes

[Invictus 26]

Hi, I've got a slight problem. Our ingame report system uses mysql to place it in the database upon which we can respond via the admin panel. upon finishing this system I came into an issue, because of mysql dislikes any special characters (example -/'`!@) I tried using escapes in the mysql query but couldn't make it work

any ideas?

			local cmd="mysql -u root kwix --execute='insert into kwix_tickets (user, mail, title, content) values ('".. name1 .."', '".. mail .."', '".. title .."', '".. msg .."');'"
			os.execute(cmd)