added mysql_escape_real_string