use mysqli_statement_fetch() rather than mysqli_stmt_get_result()
add switch to show header for dev/prod site
remove newlines to suppress "output already started" warning