Use addslashes rather than mysql_real_escape_string()

I get crashes on `mysql_real_escape_string()`.

Is `addslashes()` acceptable in this context (limited use by singe user with no MySQL db involved)?