update : sql.php pass phpmd