act/addhours.php and control/addhours.php converted to prepared statements