Complete security audit fixes

app/contact/api/engine/retrieve_contact.php

@@ -1,7 +1,6 @@
 <?php 
     session_start();
 
-    require '../../../preset.php';
     require '../../../assets/utils/db_auth.php';
 
     $id = (int)$data['id'];
@@ -9,15 +8,15 @@
     $sql = "SELECT * 
         FROM md_contact
         WHERE 
-            company_id = {$company_id} and 
-            id = {$id}";
+            company_id = :company_id and 
+            id = :id ";
 
     $sth = $pdo2->prepare($sql);
-    $sth->execute();
-    if ($sth->errorInfo()[0] != "00000" && !empty($sth->errorInfo()[0])) {
-        $answer["message"] = (empty($sth->errorInfo()[2])) ? $sth->errorInfo()[0] : $sth->errorInfo()[2];
-        exit(json_encode($answer));
-    }
+    $sth->execute([
+        ":company_id" => $company_id,
+        ":id" => $id
+    ]);
+    db_check($sth, $answer);
 
     $target_dir = $include_url."uploads/contact/";