using mysql; implemented better security for admin powers