I execute a MySQL statement with an asterisk from within a bash shell:

```
query=`cat <<EndOfMySQL
INSERT tmp_table
SELECT * FROM table
;
EndOfMySQL
`

echo $query

echo $query | mysql database

```

The problem is that the asterisk is replaced by the list of files in the current directory and the query becomes erroneous. How to avoid this behavior? It doesn't matter whether I use backticks or `$()`. I'd expect some escape sequence like `\*`, but at least this one doesn't work.