fix: mysql_real_escape_string position..

.. returned false