Did some touch up on the display to avoid SQL injection. Also cleaned up some code so that there are no PHP warnings.