function mres & mres_id (mysql_real_escape_string)