Database Mysql เหมือนโดน Spam ยิงเข้ามาในฐานข้อมูลของการสมัครสมาชิกอ่ะครับ รบกวนช่วยดูหน่อยครับ

<div id="register" class="animate form">
                <section class="login_content">
                    <form name="formCreate" id="formCreate" action="secret_query.php" method="post">
                        <h1>Create Account</h1>
                        <div>
                            <input type="text" id="username_create" name="username_create" class="form-control" placeholder="Username" required="required" />
                        </div>
                        <div>
                            <input type="password" name="password_create" class="form-control" placeholder="Password" required="required" />
                        </div>
                        <div>
                            <select name="title_name_create" class="form-control" required="required">
                                <option value="">-- โปรดระบุ --</option>
								<?php echo config("title_name", "", $conn);?>
							</select>
							<br/>
                        </div>
                        <div>
                            <input type="text" name="first_name_create" class="form-control" placeholder="First Name" required="required" />
                        </div>
                        <div>
                            <input type="text" name="last_name_create" class="form-control" placeholder="Last Name" required="required" />
                        </div>
                        <div>
                            <input type="email" name="email_create" class="form-control" placeholder="Email (Ex. [email protected]" required="required" />
                        </div>
                        <div>
                            <input type="text" name="mobile_create" class="form-control" placeholder="Mobile (Ex. 08x-xxx-xxxx)" required="required" />
                        </div>
                        <div>
							<img src="/captcha/captcha_img.php">
							<input type="text" class="form-control" name="capt" placeholder="Input Above Code (Ex. DDK3K)" required="required" >
						</div>
                        <div>
							<input type="hidden" name="mode" value="create">
                            <input type="submit" class="btn btn-default submit" value="Create Account">
                            <!--<input type="reset" class="btn btn-default submit" value="Reset">-->
                        </div>
                        <div class="clearfix"></div>
                        <div class="separator">
                            <p class="change_link">Already a member ?
                                <a href="#tologin" class="to_register"> Log in </a>
                            </p>
                            <div class="clearfix"></div>
                            <br />
                            <div>
                                <h1><!--<i class="fa fa-paw" style="font-size: 26px;"></i>--> Ovation Store!</h1>
                                <p>©2017 All Rights Reserved.</p>
                            </div>
                        </div>
                    </form>
                    <!-- form -->
                </section>
                <!-- content -->
            </div>

<?php ob_start();
session_start();

require("config/connection.php");
require("lib/lib_general.php");

if($_REQUEST["mode"] == "create")
{
	create($_REQUEST, $conn);
}

function create($data, $conn)
{
	//check input capt with session captcha
	if($_SESSION['captcha']!=$data['capt'] || $_SESSION['captcha']=='BADCODE')
    { 
     
		$msg = "Captcha Code Wrong! Please try again.";
		$page = "index.php";

		phpAlert($msg);		
		redirectPage($page);
	}
	else
	{

		$insert = "insert into user_login(username, password, password_txt, title_name, first_name, last_name, email, mobile, status, position, image_path, image_name, log_user, log_date, log_time, log_status, log_access_date, log_access_time)values('".$data["username_create"]."', '".md5($data["password_create"])."', '".$data["password_create"]."', '".$data["title_name_create"]."', '".$data["first_name_create"]."', '".$data["last_name_create"]."', '".$data["email_create"]."', '".$data["mobile_create"]."', '0', '0', '/images/member/', '', 'Online S', curdate(), curtime(), 'a', '', '')";
		mysqli_query($conn, $insert);

		$msg = "Rigister Already. Please wait administrator activate your account!";
		$page = "login.php";

		phpAlert($msg);		
		redirectPage($page);
	}
}



?>