added function mysql_escape_string