SQl statements executed with Prepared Statments, simple ORM implemented

All user controlled content sql escaped via PreparedStatements.
Makes SQL injection attacks very difficult.
Parameter types determined by simple ORM class mapping.
Categories panel selection moved to front page.
New page for diplaying staff details.


Signed-off-by: celynch <celynch@gmail.com>