Removed mysql_real_escape_string.

Relying on a str_replace for apostrophe ['] only.