removal of php injection on home page