Yep they need to escape every character in the string not just the plus signs