Functions prepare_query and execute_query are both used to run a query
Converted most queries to parameterized queries
Fixed bugs in QueryClass::Query method
-Updated CHECK_IPBAN query
-Fixed query in RECOVER_PASSWORD
Queries in about.php now use parameterized queries
Updated account.php to use parameterized queries
Updated admin* pages to parameterized queries
Updated bruteforce.php
Updated to parameterized queries
-Fixed data member access in recover.php
Updated log*.php
Updated remaining files
Function prepare_query handles default values properly, where $database is left out
-Minor fixes to prepare and execute query functions
-Added function refValues to return an array of references specifically for mysqli_bind_param
Parameterized queries do not support table/column name substitution so some
Admin queries use sprintf to substitute table names
-Fixed parameter markers should not be surrounded by quotes
Class list query uses TOTALCLASSES
-Fixed minor issues with some queries
-Fixed calls to count() to data member $num_rows
Fixed BF_* query defines where parameter markers are quoted
Fixed minor bugs in log* pages (queries, undefined 'group_id')
-Fixed parameter query defines in adminquery.php, array indices for character data in adminaccounts.php
Minor fixes to position.php and resetlook.php
-Cleaned up ipban()
Fixed call from count() to num_rows var
Fixed BF_IP query causing 'invalid prepared statement' due to wrong database
Updated function Query to return TRUE on non-SELECT queries
Added new about me field when registering for a new account