do real_escape_string in db class on inserts and updates