update mysql_escape_string to mysql_real_escape_string
changelog and version for 1.4.12-pl