Always use mysql_real_escape_string(), even when DB_CHARSET is not properly set. fixes #24773.



git-svn-id: https://core.svn.wordpress.org/trunk@24712 1a063a9b-81f0-0310-95a4-ce76da25c4cd