MODIFIED save.php. Added protection against SQL injection by using parameterized query.