mysql_escape_string( mysql_handler handler, string text )