Update user_incoming.php

Solution for XSS bug