Update reject.php

Fixed a sql injection