filter and security of db.php