Changed to Prepared Statements

** Changed SQL statements to prepared ones
** Changed the login fields from text to password