added mysql_real_escape_string to install and add-domain script.