replace mysql extenstion usage with PDO
no need for semicolon at the end of sql query
parameterization