Update functions.php

xss-script blocking