act/addproj.php converted to prepared statements, minor aesthetic change to members.php, extra sanitisation for act/addhours.php