[fix] Replacing incorrect mysql_real_escape_string with esc_sql