switched addknown.php to secure prepared statements