Php Get First Character Of String Sql Injection