Additional sql security fixes, initial pdo connection