Use prepared statement to prevent SQL injection.

Fixes #17 and #18.
Merge branch 'master' of github.com:NESCent/FossilCalibrations