title: mysql_real_escape_string() is not escaping anything
body: <ol>
  <li>would I need to use real escape in both my INSERT and SELECT FROM statements?</li>
  <li><p>why the syntax I'm using in the following example isn't working (It's just one of the many ways I've tried)?</p>
  
  <pre><code>//insert user input for word 1
  $sql = "INSERT INTO test (Word1, Word2, Word3, Word4, Word5)
  VALUES('$Word1','$Word2','$Word3','$Word4','$Word5')",
  mysql_real_escape_string($Word1),
  mysql_real_escape_string($Word2),
  mysql_real_escape_string($Word3),
  mysql_real_escape_string($Word4),
  mysql_real_escape_string($Word5);
  if(!mysql_query($sql,$con))
  {
    die('Error: ' . mysql_error());
  }
  </code></pre></li>
  </ol>