removed real_escape_string from sql
getting bind errors on BlueHost