Added SQL injection protection

Added mysql_real_escape_string to the search posts