Update loc-in.php

add mysqli_real_escape_string