Fix SQL injection in delete.php

Just a quick fix to prevent SQL injection