Well, I found the problem.

It should be:
$username = mysqli_real_escape_string($link, $username);

Not:
$username = mysql_real_escape_string($username, $link);

The first statements were mysqli so that was a mistake on my part. The odd thing is that $link comes first with mysqli and second with mysql.