Correction du header
Add $db->sql_escape() for extra safety