Quoted $_POST subscripts
Needs proper cleaning up to prevent sql injection