need to fix the mysql real escape string