Fix sign up form name
Use MySQL prepared statements