Update home.php

SQL injection fixed added