Prevented SQL Injection. Prepared statements with parameters implemented in the DB Class