mysql_connect not included. Check defence code