PHP vulnerable to SQL injection attacks