Login SQL Injection Prevention

Added mysql_real_escape_string on $_POST variables to prevent SQL
Injection