Possible SQL injection!
Avoid words like 'select', 'delete', 'update', 'drop' etc.

Click here and correct form.