Added mysqli_real_escape_string to all variables

Allows use of quotations now