Avoid SQL injection

Fix critical exploit in vote.php allowing to get back data from the database (users password, etc.).
Exploit : just modify the cookie "loginname".
Merge pull request #3 from vthibault/patch-1

Avoid SQL injection