[Konstantinos]

You'd also need to escape percent sign. Escape the strings as well.

For format function -> "... LIKE '%q%%'"
For mysql_format function -> "... 'LIKE %e%%'"

You don't use mysql_store_result() function which will results in errors/warnings in mysql logs.
Consider updating to latest versions of the mysql plugin (threaded queries) eventually.