Php If Variable Contains Sql