replace mysql_real_escape_string with DB escape()

+ (line 64) remove unnecessary mysql_real_escape_string (the value is already tested at ../Paginate.php line 229)