Fix all SQL queries, to make sure they use pg_query_params for parameter injection.
Simplify various `if` conditionals to 1-liners.