switch from "mysql_real_escape_string" to "db->quoteString"
Support MySQLi Connection (mysqli API)
X-elFinder version 0.86