Insert date and time using real escape string?

$query = "insert into tbltopics
set categories = '".$con->real_escape_string($_POST['categories'])."',
message = '".$con->real_escape_string($_POST['message'])."',
date = ? postedby = '".$con->real_escape_string($_SESSION['Username'])."'";