Fixed sql to sqli in submit.php