incorporated PDO and prepared statements