Introduced sqlesc() function to avoid retyping mysqli_real_escape_string()