added missing mysql.escape method calls