mysqli_real_escape_string add to createDish