Update phonebook.php

Solution for XSS on search and SQL injection on GPID