Update Database.php

prevent SQL Injection