rm mysql_real_escape_strings() no longer required with queryDB()