mysql real escape string in sql class