line 202 - had to remove mysql_real_escape() - we didn't need that any more