Use addslashes rather than mysql_real_escape_string()

I get crashes on `mysql_real_escape_string()`.

Is `addslashes()` acceptable in this context (limited use by single user with no MySQL db involved)?

Addresses #1.