Switched input sanitization of city names from mysql_real_escape_string to DB::escape()