fix sql injection
mysql module is deprecated, use mysqli function
Merge pull request #44 from dr4Ke/fix_sql_exploit

fix sql injection