Update eds_db_widget.html

mysql_real_escape_string, which should have been there all along.  Oops.