got rid of redundant call to mysql_real_escape_query