using re.escape to quote params with metachars

android_db.py

@@ -32,7 +32,8 @@ class AndroidSQLConn:
         new_str = ','.join(map(
             AndroidSQLConn._quote_param_,params[:n_params]
             ))
-        return param_str.sub(new_str,SQL,1)
+        print(*map(repr,(new_str,SQL)))
+        return param_str.sub(re.escape(new_str),SQL,1)
     def execute(self,SQL,params = None):
         if params:
             SQL = AndroidSQLConn._sub_params_(SQL,params)