Add correct escaping for mysql function and PDO examples
Add config template
Add some warning, it's vulnerable code inside