Avoid SQL injection

Fix critical exploit in vote.php allowing to get back data from the database (users password, etc.).
Exploit : just modify the cookie "loginname".