Fixed two remaining mysql_real_escape_strings.