change deprecated function mysql_escape_string to mysql_real_escape_string to be ready for PHP >= 5.3