fix doc.php for SQL Injection vulnerable point.