Sample PHP script with sql injection vulnerability and fix