23b6e5868d
* using prepared statements for sql query for fixing sql injection * returning error in getChat instead of logging