#1 Move all queries to model file

[Rob J]

Move all the queries into one file (serving as a model in MVC), eliminate redundant ones, and call the and get the results via functions.

Right now, some pages just create and execute queries ad hoc. I think it is better design to separate the data gathering functions from the view and controller code.

Right now, a simple first step is secure the queries and move them to one place.