mysql_prep inserted in booksall.php