mysql_real_escape_string is deprecated

[basictheprogram]

https://www.php.net/manual/en/function.mysql-real-escape-string.php

This extension was deprecated in PHP 5.5.0, and it was removed in PHP 7.0.0. Instead, the MySQLi or PDO_MySQL extension should be used. See also MySQL: choosing an API guide. Alternatives to this function include: mysqli_real_escape_string() PDO::quote()

[basictheprogram]

cc: @tannerrj

[basictheprogram]

Replaced mysql_real_escape_string with mysqli_real_escape_string.

[basictheprogram]

Dup of https://sourceforge.net/p/crossfire/bugs/959/

Fixed with 60d61f45710165a97042da16276386645585b608