fixed problem where take/drop buttons wouldn't be removed after completing action
updated read; added mysql injection prevention; implemented secret room event