Update 20.php

Replaced $pdo>mysql_real_escape_string($string) with $pdo->quote($string).

11/20.php

@@ -7,6 +7,6 @@
   function mysql_fix_string($pdo, $string)
   {
     if (get_magic_quotes_gpc()) $string = stripslashes($string);
-    return $pdo->real_escape_string($string);
+    return $pdo->quote($string);
   }
 ?>