replaced the depreciated mysql_real_escape_string function with the appropriate mySQLi extension