mysql_escape_string is deprecated