Commit to 1.0.9

Updated code to use prepare() with queries to protect them from sql injections.