prepared statement SQLs

[Aleyasen]

The SQL statements need to be constructed and submitted differently than they are now. Each kind of call (i.e., with certain clauses in it and kinds of conditions, such as a date range or a user name or app name and group by or order by or whatever) needs to be defined as a template with placeholders for the actual values of dates/username/app name/etc. There might be around 8-10 of these templates. DarshanViz needs to make the MySQL call "Prepare" on each of these templates. This is super important. Then for the actual call, you just make a SQL call with the previously prepared template and the placeholder values that you want to use. This is super important for security.