mysql_escape_string has been DEPRECATED
demo for test