CRC: PDO query does not escape characters

A concept with a path such as \Custom\Folder[1]\
 does not result in a PDO query that escapes the [1].
This works correctly on setfinder queries.