Change to addslashes() for PHP 5.5; mysql_real_escape_string() now requires a MySQL connection