string(2) "FR" Mysql injection error