$sqli Param Fix

Lines 27 and 44