--- a/displayCategory.php
+++ b/displayCategory.php
@@ -1,14 +1,18 @@
 <?php
 include_once ("./lib/common.inc.php");
 if ($_REQUEST['category']) {
-    include_header("Category");
+    include_header($_REQUEST['category']." goods and services");
     echo "<center><h1>".$_REQUEST['category']."</h1></center>";
-  $query = "SELECT CNID, description, value, agencyName, category, contractStart, supplierName
-    FROM `contractnotice`
-    WHERE childCN = 0 
-    AND category = '" . $_REQUEST['category'] . "'
-    ORDER BY value DESC";
-  $result = mysql_query($query);
+  $query = 'SELECT "CNID", description, value, "agencyName", category, "contractStart", "supplierName"
+    FROM contractnotice
+    WHERE "childCN" is null 
+    AND category = :category
+    ORDER BY value DESC';
+$query = $conn->prepare($query);
+$query->bindParam(":category", $_REQUEST['category']);
+	$query->execute();
+		databaseError($conn->errorInfo());
+	
     echo "<table>  <thead>
     <tr>
       <th>Contract Notice Number</th>
@@ -19,7 +23,7 @@
       <th>Supplier</th>
     </tr>
   </thead>";
-  while ($row = mysql_fetch_array($result, MYSQL_BOTH)) {
+  foreach ($query->fetchAll() as $row) {
     setlocale(LC_MONETARY, 'en_US');
     $value = number_format(doubleval($row['value']) , 2);
     echo ("<tr>
@@ -31,30 +35,30 @@
     </tr>");
   }
   echo "</table>";
-  mysql_free_result($result);
 } else {
     /*
      split by main categories
     */
     include_header("Categories");
-$query = "SELECT sum(value), category
-FROM `contractnotice`
-WHERE childCN = 0 
-GROUP BY category ORDER BY sum(value) DESC ";
-$result = mysql_query($query);
+$query = 'SELECT sum(value), category
+FROM contractnotice
+WHERE "childCN" is null
+GROUP BY category ORDER BY sum(value) DESC ';
+$query = $conn->prepare($query);
+	$query->execute();
+		databaseError($conn->errorInfo());
   echo "<table>  <thead>
     <tr>
       <th>Category</th>
       <th>Total Contracts Value</th>
     </tr>
   </thead>";
-while ($row = mysql_fetch_array($result, MYSQL_BOTH)) {
+  foreach ($query->fetchAll() as $row) {
   setlocale(LC_MONETARY, 'en_US');
   $value = number_format(doubleval($row[0]) , 2);
   echo ("<tr><td><A href=\"displayCategory.php?category={$row[1]}\"><b>{$row[1]}</b></a></td><td>\$$value</td></tr>");
 }
 echo "</table>";
-mysql_free_result($result);
 }
 include_footer();
 ?>