Update doData.php

Changed to Object-Oriented PHP/MySQLi and used prepared statement to minimize SQL Injection