Started work on #15. get_avail_flashcard_games and getPDB are using prepared statements. The others are going to have to wait for now, prepared statements don't have straightforward support for subqueries so a large portion of the queries are either going to have to be rewritten or we're going to have to figure out how mysqli multiquery works with subqueries. (I couldn't find any concrete examples.)