significant changes and bug fixes

added to render_person
escaped strings for sql queries