Update samples.php

escape sql to prevent html page from breaking