Added prepared statements to combat sql injection for A3. From now on try to use mysqli and prepared statements esp if the users give any input. If they don't then it doesn't matter. Eg. I didn't need to add prepared statements to delete.
In addition the edit page now confirms that edits worked.