changed php queries into parameterised php queries.
added additionall functions to the PHP Scripts and also took care of some
SQL injection openings by usings parametrized queries.