Now we're using prepared statements! A much more elegant solution.