Yeah, no need to escape input twice. You’re using prepared statements, you don’t need the mysql_real_escape_string method any more.