Fix escaping of SQL

On my system I saw errors from malformed SQL queries due to astrophes used in messages sent by users through this email_request.php page. Perhaps mysql_real_escape_string should be added to the cleanvars functions.