Update show_query.php

escape sql sample to prevent special characters breaking html