er, in style.c... skin.c uses two single quotes for SQL quote escaping. I'll get it right some day!