The function is deprecated; use mysql_real_escape_string() instead

Use mysql_real_escape_string() instead mysqli_real_escape_string. For more information CLICK HERE

mysqli_real_escape_string ($link ,$source )  // $link is your connection variable