Update the mySQL class to use PDO functions.
Modify mySQL class to allow execution of prepared statements.
Change all queries involved in home page to use prepared statements.
Replace mysql_real_escape_string with PDO prepared statements.
Remove code which has been commented out since 2010

This is in the git history in case anyone needs to refer to it.
Remove code which has been commented out since 2007

This is in the git history in case anyone needs to refer to it.
Remove more long commented-out code that uses non-parameterized SQL
Replace mysql_real_escape_string with PDO prepared statements.