wait, what? Craigslist doesn't escape quotes? Should I try a SQL injection?