setting up a web server: sql injection and prepared statements