updated to use PDO prepared statements for insert/update/delete.  still need to figure out mysql functions