added some sql injection protection
addnew.php and checker.php

Now functioning without session vars
Removed session dependencies from add item function