That app/phonebook needs security improvements. Last time I looked at it was probably a year or two ago. What I saw were major security problems.
Make sure to use the escape on everything sent to the web browser.
Make sure the code uses the database class, which uses prepared statements...