security base class secured post function (_) updated with mysqli_real_escape_string