fixing mysql_escape issue