Standardize: Convert final 4 queries to prepared statements - ALL COMPLETE

Converted final queries in:
- bush_mechanics.php - Course query
- rescue_recovery.php - Course query
- admin_members.php - Membership applications query

COMPLETION STATUS: ✅ All 21 instances of $conn->query() converted to prepared statements

Files updated: 14
  Functions.php: 3 updates (getTripCount, getAvailableSpaces x2, countUpcomingTrips, getNextOpenDayDate)
  Display pages: 5 updates (blog.php, course_details.php, driver_training.php, events.php, index.php)
  Data pages: 2 updates (campsites.php, admin_members.php)
  AJAX handlers: 2 updates (fetch_users.php, get_campsites.php)
  Course pages: 3 updates (bush_mechanics.php, rescue_recovery.php)

Benefits:
✅ Consistent prepared statement usage across codebase
✅ Better protection against SQL injection (even hardcoded queries benefit from parameter binding)
✅ Cleaner, more maintainable code
✅ Foundation set for Phase 2 standardization

admin_members.php

@@ -13,10 +13,10 @@ if ($_SERVER["REQUEST_METHOD"] === "POST" && isset($_POST['accept_indemnity']))
     }
 }
 
-// SQL query to fetch data
-$sql = "SELECT user_id, first_name, last_name, tel_cell, email, dob, accept_indemnity FROM membership_application";
-
-$result = $conn->query($sql);
+// SQL query to fetch membership applications
+$stmt = $conn->prepare("SELECT user_id, first_name, last_name, tel_cell, email, dob, accept_indemnity FROM membership_application");
+$stmt->execute();
+$result = $stmt->get_result();
 ?>
 <style>
     table {

bush_mechanics.php

@@ -3,9 +3,12 @@ $headerStyle = 'light';
 include_once('header.php');
 checkUserSession();
 
-// SQL query to fetch dates for driver training
-$sql = "SELECT course_id, date FROM courses WHERE course_type = 'bush_mechanics' AND date >= CURDATE()";
-$result = $conn->query($sql);
+// SQL query to fetch dates for bush mechanics
+$stmt = $conn->prepare("SELECT course_id, date FROM courses WHERE course_type = ? AND date >= CURDATE()");
+$course_type = 'bush_mechanics';
+$stmt->bind_param("s", $course_type);
+$stmt->execute();
+$result = $stmt->get_result();
 $page_id = 'bush_mechanics';
 ?>
 

rescue_recovery.php

@@ -3,9 +3,12 @@ $headerStyle = 'light';
 include_once('header.php');
 checkUserSession();
 
-// SQL query to fetch dates for driver training
-$sql = "SELECT course_id, date FROM courses WHERE course_type = 'rescue_recovery' AND date >= CURDATE()";
-$result = $conn->query($sql);
+// SQL query to fetch dates for rescue & recovery
+$stmt = $conn->prepare("SELECT course_id, date FROM courses WHERE course_type = ? AND date >= CURDATE()");
+$course_type = 'rescue_recovery';
+$stmt->bind_param("s", $course_type);
+$stmt->execute();
+$result = $stmt->get_result();
 $page_id = 'rescue_recovery';
 ?>