mysql_escape_string() is deprecated
Avoid notices about array to string conversion
Call-time pass-by-reference has been removed