Follow up patch

Use mysqli_real_escape_string instead of mysql_real_escape_string