document filter expression handling; get unescaping for expresion rhs right
clean up code/mysql.php, sort functions
add permission checks to all per-table sql functions
disable 'global' persistent vars: not used, and maybe not a good idea in general
add documentation, comments