Should consider storing <h2> errors in defined constants file.

[JamesEarle]

Just like the queries.php file, we'll get the same security as queries but this way we can say echo constant('EMAIL_NOT_FOUND'); rather than nasty raw HTML.