Insert Php Variable Into Sql Query