* htdocs/prospection/save_contact.php: removed SQL injection by escaping
  arguments