members.php converted to prepared statements