https://www.php-resource.de/forum/php-developer-forum/97001-mysql_real_escape_string