COMMON MISTAKE: – Make sure you connect to database before you use mysql_real_escape_string, otherwise it will not get the passed variable.
include('dataconn.inc');
$reportclient = mysql_real_escape_string($_POST['reportclient']);