#3 Move to mysql_real_escape_string()

[Andrew van der Stock]

For all queries except blobs. The exception is not the
rule. Subsequently reduce the validation requirements
for input data sanitization.