Removed mysql_real_escape_string() as it's not needed here