added mysql_real_escape_string() to prevent sql injection
added mysql_real_escape_string() to prevent sql injection

git-svn-id: 236d1da889b004185c53d75d23fb6bdc6a50cecb@316 54a900ba-8191-11dd-a5c9-f1483cedc3eb

nswinea/cliniccases,nswinea/cliniccases,nswinea/cliniccases