set real_escape_string instead of escape_string