switched to prepared statements wrapper