mysql security

added protection against sql injection and also switched over to MySQLdb
library, which I never before knew existed...
end of day

still have to figure out the product error getting thrown by having
product options