Update uploadapp.php

Perform sqlesc after is_valid_id