manage.php + conn.php converted to prepared statements