Shifted from mysqli to PDO for more security.