Added mysql_escape_string() function to all input

This was to protect against SQL injections.