Php If Variable Contains String Sql