#2 sqli prone queries pdoified. Some static queries still on mysql_