We should be able to use a PreparedStatement here right?