Update NoName.php

Fixed sql injection in query