Added function safeString in DBQuery. Use instead of mysqli_real_escape_string() or mysql_real_escape_string()