Updating web_ui to use parameterized queries instead of concatenation.