Security fix

mysqli_real_escape_string && intval