Php Function To Prevent Sql Injection