[Kong]

mysql_escape_string will secure the code but it will also break it.

Example, to search for Mario you wouldn't type mario, you would type
SELECT * FROM games WHERE title LIKE "%Mario%"

If you escaped that then it wouldn't search for anything.