xcvs-loginfo should use mysql_real_escape_string() not mysql_escape_string()

In IRC, merlinofchaos pointed out http://drupal.org/cvs?commit=252248

That used to just have the message:

Looked like the accented o in his name confused the xcvs-loginfo script. Looking at the code, we're calling mysql_escape_string(). Reading the PHP docs, looks like we really want to be using mysql_real_escape_string() instead, since the later "tak[es] into account the current character set of the connection".