Update torol.php

Fixed one SQL injection hole.