Fixed the SQL injection problem in news.php