UPDATES

entered defence from sql injection(!)
wrote most of pooyae's requests
split to 3 query files