Update mail.php

Fixed 1 XSS vulnerability