Please describe the problem:
When planner writes the tasks to the database, a task name with a ' in
it will not be written.  The SQL string that planner is building to
INSERT the data is not properly escaping strings contining ' or \.

Of course in this case it is not a security issue (i.e. SQL injection)
because anyone using planner to write to that database could use psql
and inject whatever directly.

Steps to reproduce:


Actual results:


Expected results:


Does this happen every time?


Other information:
This is an old bug report remaining in the Debian BTS. 

It probably was fixed already but I'm hereby polling the upstream authors to
verify. If it's fixed, I will close the corresponding bugs in the Debian BTS.