ChangeLog:

* add client:escape()
* use mysql_real_query() to replace mysql_query()