mysql real escape bug

lol