While Loop Array Php Format String Vulnerability