Using Php Variables In Sql Query