Update index.php

SQL injection issue fixed