Update error.php to prevent potential XSS