fleshing out prepared statements with index.php