--- a/displayCategory.php
+++ b/displayCategory.php
@@ -1,14 +1,18 @@
 <?php

 include_once ("./lib/common.inc.php");

 if ($_REQUEST['category']) {

-    include_header("Category");

+    include_header($_REQUEST['category']." goods and services");

     echo "<center><h1>".$_REQUEST['category']."</h1></center>";

-  $query = "SELECT CNID, description, value, agencyName, category, contractStart, supplierName

-    FROM `contractnotice`

-    WHERE childCN = 0 

-    AND category = '" . $_REQUEST['category'] . "'

-    ORDER BY value DESC";

-  $result = mysql_query($query);

+  $query = 'SELECT "CNID", description, value, "agencyName", category, "contractStart", "supplierName"

+    FROM contractnotice

+    WHERE "childCN" is null 

+    AND category = :category

+    ORDER BY value DESC';

+$query = $conn->prepare($query);

+$query->bindParam(":category", $_REQUEST['category']);

+	$query->execute();

+		databaseError($conn->errorInfo());

+	

     echo "<table>  <thead>

     <tr>

       <th>Contract Notice Number</th>

@@ -19,7 +23,7 @@
       <th>Supplier</th>

     </tr>

   </thead>";

-  while ($row = mysql_fetch_array($result, MYSQL_BOTH)) {

+  foreach ($query->fetchAll() as $row) {

     setlocale(LC_MONETARY, 'en_US');

     $value = number_format(doubleval($row['value']) , 2);

     echo ("<tr>

@@ -31,30 +35,30 @@
     </tr>");

   }

   echo "</table>";

-  mysql_free_result($result);

 } else {

     /*

      split by main categories

     */

     include_header("Categories");

-$query = "SELECT sum(value), category

-FROM `contractnotice`

-WHERE childCN = 0 

-GROUP BY category ORDER BY sum(value) DESC ";

-$result = mysql_query($query);

+$query = 'SELECT sum(value), category

+FROM contractnotice

+WHERE "childCN" is null

+GROUP BY category ORDER BY sum(value) DESC ';

+$query = $conn->prepare($query);

+	$query->execute();

+		databaseError($conn->errorInfo());

   echo "<table>  <thead>

     <tr>

       <th>Category</th>

       <th>Total Contracts Value</th>

     </tr>

   </thead>";

-while ($row = mysql_fetch_array($result, MYSQL_BOTH)) {

+  foreach ($query->fetchAll() as $row) {

   setlocale(LC_MONETARY, 'en_US');

   $value = number_format(doubleval($row[0]) , 2);

   echo ("<tr><td><A href=\"displayCategory.php?category={$row[1]}\"><b>{$row[1]}</b></a></td><td>\$$value</td></tr>");

 }

 echo "</table>";

-mysql_free_result($result);

 }

 include_footer();

 ?>