Switched a couple of mysql_real_escape_string calls to DB_DataObject's own escape function.