Php Find Substring In String Sql Injection